Student personal information; school service providers and school-issued devices

Virginia's K-12 student privacy law. Edtech providers and school device providers must publish clear privacy policies, run information security programs, let students and parents access and correct data, delete data on request, and use data only with consent or as the school contract allows. They may not use student data for targeted advertising, build non-school profiles, or sell it, and may not remotely use school-issued devices' location, camera, microphone, or interaction monitoring except for limited educational, support, proctoring, or safety purposes.